docs: warn against public web binding

2026-01-27 03:30:26 +00:00 · 2026-01-27 03:30:26 +00:00 · 8b56f0e68d
parent e7fdccce39
commit 8b56f0e68d
1 changed files with 4 additions and 0 deletions
--- a/SECURITY.md
+++ b/SECURITY.md
@ -13,6 +13,10 @@ For threat model + hardening guidance (including `clawdbot security audit --deep

 - `https://docs.clawd.bot/gateway/security`

+### Web Interface Safety
+
+Clawdbot's web interface is intended for local use only. Do **not** bind it to the public internet; it is not hardened for public exposure.
+
 ## Runtime Requirements

 ### Node.js Version